# php-twig security updates

Patch Radar has 65 security fixes for php-twig, closing 26 CVEs. The newest is DEBIAN-CVE-2026-49981 (3.27.0-0+deb13u1), released July 18, 2026.

- Web page: https://patchblox.com/security/product/linux/php-twig
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-49981](https://patchblox.com/security/data/fix/linux/debian-cve-2026-49981.md) | Jul 18, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-49981](https://patchblox.com/security/data/fix/linux/debian-cve-2026-49981.md) | Jul 18, 2026 | Debian 14 3.27.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-48805](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48805.md) | Jun 24, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-48805](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48805.md) | Jun 24, 2026 | Debian 14 3.27.0-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-48806](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48806.md) | Jun 24, 2026 | Debian 14 3.27.0-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-48807](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48807.md) | Jun 24, 2026 | Debian 14 3.27.0-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-48808](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48808.md) | Jun 24, 2026 | Debian 14 3.27.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-46636](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46636.md) | Jun 24, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46636](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46636.md) | Jun 24, 2026 | Debian 14 3.27.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46633](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46633.md) | May 27, 2026 | Debian 12.15 (bookworm) 3.5.1-1+deb12u3 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-46633](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46633.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-46633](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46633.md) | May 27, 2026 | Debian 14 3.26.0-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-24425](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24425.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-24425](https://patchblox.com/security/data/fix/linux/debian-cve-2026-24425.md) | May 27, 2026 | Debian 14 3.26.0-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-46634](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46634.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-46634](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46634.md) | May 27, 2026 | Debian 14 3.26.0-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-46640](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46640.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-46640](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46640.md) | May 27, 2026 | Debian 14 3.26.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-46638](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46638.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-46638](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46638.md) | May 27, 2026 | Debian 14 3.26.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-46627](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46627.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46627](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46627.md) | May 27, 2026 | Debian 14 3.26.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46629](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46629.md) | May 27, 2026 | Debian 14 3.26.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46629](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46629.md) | May 27, 2026 | Debian 12.15 (bookworm) 3.5.1-1+deb12u3 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46629](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46629.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47732](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47732.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47732](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47732.md) | May 27, 2026 | Debian 14 3.26.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46639](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46639.md) | May 27, 2026 | Debian 14 3.26.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46635](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46635.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46635](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46635.md) | May 27, 2026 | Debian 14 3.26.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46637](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46637.md) | May 27, 2026 | Debian 12.15 (bookworm) 3.5.1-1+deb12u3 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46637](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46637.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46637](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46637.md) | May 27, 2026 | Debian 14 3.26.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46628](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46628.md) | May 27, 2026 | Debian 12.15 (bookworm) 3.5.1-1+deb12u3 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46628](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46628.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46628](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46628.md) | May 27, 2026 | Debian 14 3.26.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47730](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47730.md) | May 27, 2026 | Debian 12.15 (bookworm) 3.5.1-1+deb12u3 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47730](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47730.md) | May 27, 2026 | Debian 13.5 (trixie) 3.27.0-0+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47730](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47730.md) | May 27, 2026 | Debian 14 3.26.0-1 | Routine | 1 | 0 |
| [DLA-4186-1](https://patchblox.com/security/data/fix/linux/dla-4186-1.md) | May 28, 2025 | Debian 11.6 (bullseye) 2.14.3-1+deb11u4 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-24374](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24374.md) | Jan 29, 2025 | Debian 13.5 (trixie) 3.19.0-1~bootstrap | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-24374](https://patchblox.com/security/data/fix/linux/debian-cve-2025-24374.md) | Jan 29, 2025 | Debian 14 3.19.0-1~bootstrap | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-51755](https://patchblox.com/security/data/fix/linux/debian-cve-2024-51755.md) | Nov 6, 2024 | Debian 13.5 (trixie) 3.14.2-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-51755](https://patchblox.com/security/data/fix/linux/debian-cve-2024-51755.md) | Nov 6, 2024 | Debian 14 3.14.2-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-51754](https://patchblox.com/security/data/fix/linux/debian-cve-2024-51754.md) | Nov 6, 2024 | Debian 13.5 (trixie) 3.14.2-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-51754](https://patchblox.com/security/data/fix/linux/debian-cve-2024-51754.md) | Nov 6, 2024 | Debian 14 3.14.2-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-51754](https://patchblox.com/security/data/fix/linux/debian-cve-2024-51754.md) | Nov 6, 2024 | Debian 12.15 (bookworm) 3.5.1-1+deb12u3 | Routine | 1 | 0 |
| [php-twig 3.3.8-2ubuntu4+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-php-twig-3.3.8-2ubuntu4-esm2.md) | Nov 6, 2024 | Ubuntu 22.04.1 LTS (jammy) 3.3.8-2ubuntu4+esm2 | High | 2 | 0 |
| [php-twig 3.8.0-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-php-twig-3.8.0-2ubuntu0.1-esm1.md) | Nov 6, 2024 | Ubuntu 24.04.5 LTS (noble) 3.8.0-2ubuntu0.1~esm1 | High | 2 | 0 |
| [php-twig 2.12.5-1ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-php-twig-2.12.5-1ubuntu0.1-esm2.md) | Nov 6, 2024 | Ubuntu 20.04 LTS (focal) 2.12.5-1ubuntu0.1~esm2 | Routine | 1 | 0 |
| [DSA-5771-1](https://patchblox.com/security/data/fix/linux/dsa-5771-1.md) | Sep 17, 2024 | Debian 12.15 (bookworm) 3.5.1-1+deb12u1 | High | 1 | 0 |
| [DLA-3888-1](https://patchblox.com/security/data/fix/linux/dla-3888-1.md) | Sep 16, 2024 | Debian 11.6 (bullseye) 2.14.3-1+deb11u3 | High | 1 | 0 |
| [DEBIAN-CVE-2024-45411](https://patchblox.com/security/data/fix/linux/debian-cve-2024-45411.md) | Sep 9, 2024 | Debian 13.5 (trixie) 3.8.0-4 | High | 1 | 0 |
| [DEBIAN-CVE-2024-45411](https://patchblox.com/security/data/fix/linux/debian-cve-2024-45411.md) | Sep 9, 2024 | Debian 14 3.8.0-4 | High | 1 | 0 |
| [DSA-5248-1](https://patchblox.com/security/data/fix/linux/dsa-5248-1.md) | Oct 5, 2022 | Debian 11.6 (bullseye) 2.14.3-1+deb11u2 | High | 1 | 0 |
| [DEBIAN-CVE-2022-39261](https://patchblox.com/security/data/fix/linux/debian-cve-2022-39261.md) | Sep 28, 2022 | Debian 12.15 (bookworm) 3.4.3-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-39261](https://patchblox.com/security/data/fix/linux/debian-cve-2022-39261.md) | Sep 28, 2022 | Debian 13.5 (trixie) 3.4.3-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-39261](https://patchblox.com/security/data/fix/linux/debian-cve-2022-39261.md) | Sep 28, 2022 | Debian 14 3.4.3-1 | High | 1 | 0 |
| [php-twig 2.12.5-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-php-twig-2.12.5-1ubuntu0.1-esm1.md) | Sep 28, 2022 | Ubuntu 20.04 LTS (focal) 2.12.5-1ubuntu0.1~esm1 | Urgent | 2 | 0 |
| [php-twig 2.4.6-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-php-twig-2.4.6-1ubuntu0.1-esm1.md) | Sep 28, 2022 | Ubuntu 18.04.6 LTS (bionic) 2.4.6-1ubuntu0.1~esm1 | High | 2 | 0 |
| [php-twig 3.3.8-2ubuntu4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-php-twig-3.3.8-2ubuntu4-esm1.md) | Sep 28, 2022 | Ubuntu 22.04.1 LTS (jammy) 3.3.8-2ubuntu4+esm1 | High | 1 | 0 |
| [DSA-5107-1](https://patchblox.com/security/data/fix/linux/dsa-5107-1.md) | Mar 24, 2022 | Debian 11.6 (bullseye) 2.14.3-1+deb11u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2022-23614](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23614.md) | Feb 4, 2022 | Debian 12.15 (bookworm) 3.3.8-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2022-23614](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23614.md) | Feb 4, 2022 | Debian 13.5 (trixie) 3.3.8-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2022-23614](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23614.md) | Feb 4, 2022 | Debian 14 3.3.8-1 | Urgent | 1 | 0 |

---

Data as of 2026-11-06T17:00:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo